Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/te61xF7NZco-K8nPKw6w0AGZr1k.roa
File: te61xF7NZco-K8nPKw6w0AGZr1k.roa (raw, json)
Hash identifier: B5gasvq9rS0E+ueutp22Mzlz1NOmaJ1c0q1xmW6HM5w=
Subject key identifier: B5:EE:B5:C4:5E:CD:65:CA:3E:2B:C9:CF:2B:0E:B0:D0:01:99:AF:59
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14F10157636363CDB2DD45A30AD948
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/te61xF7NZco-K8nPKw6w0AGZr1k.roa
Signing time: Sun 01 Jan 2023 20:45:21 +0000
ROA not before: Sun 01 Jan 2023 20:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24704
IP address blocks: 80.96.239.0/24 maxlen: 24
193.230.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f1:01:57:63:63:63:cd:b2:dd:45:a3:0a:d9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5eeb5c45ecd65ca3e2bc9cf2b0eb0d00199af59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:7f:2e:27:46:13:2b:f1:8a:5b:d0:b2:e2:
22:0b:ba:7a:d9:59:38:3c:8b:71:a3:cb:e2:28:dc:
99:fe:f1:06:cf:9b:94:0e:fb:0b:25:3e:dd:77:1e:
00:0f:6c:f3:6b:8d:3d:0a:a4:93:3f:cb:83:ee:4f:
1b:82:8f:fc:78:91:05:1e:06:1c:90:9d:56:9d:50:
d2:4d:a1:51:95:3d:d2:c2:12:c9:db:04:c9:c6:18:
75:29:6f:0a:3e:30:af:8b:87:44:84:8e:b6:2e:1e:
d1:f7:75:4d:83:ba:39:4c:c4:d3:e9:fe:61:99:a1:
3a:01:3e:bc:4c:26:b6:bb:ed:6b:ea:f5:76:7f:30:
35:0a:43:eb:01:4a:10:8f:fc:56:bc:b5:2b:9b:03:
d2:8f:c4:8f:74:ff:47:d6:05:ce:08:6d:04:1e:2a:
be:e7:89:1a:08:0c:98:01:02:9c:5b:6b:34:c2:8e:
b0:b2:ff:a8:95:73:df:99:42:a5:82:b0:ba:52:89:
65:65:63:75:50:07:88:09:25:7d:0c:71:c2:d5:3b:
95:f1:5d:b3:8f:cb:5c:83:32:6b:8b:46:48:19:86:
fb:37:6a:54:d3:61:a5:94:2c:e9:2b:14:62:91:07:
96:8e:ac:42:a2:f4:1e:9a:7b:d6:97:a0:08:60:6b:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:B5:C4:5E:CD:65:CA:3E:2B:C9:CF:2B:0E:B0:D0:01:99:AF:59
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/te61xF7NZco-K8nPKw6w0AGZr1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.239.0/24
193.230.233.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ba:ec:26:6b:d8:09:c0:fd:fe:3b:c7:5e:d8:ef:e1:f2:79:
ff:37:7c:88:eb:75:78:53:0c:0a:2d:54:55:3c:48:44:8b:51:
50:9c:67:14:57:a5:6d:d1:38:ff:2d:60:c1:7e:7e:74:92:a8:
ac:f4:0c:ce:0a:61:ef:74:53:29:61:15:6d:c5:bf:55:40:d1:
55:d0:02:74:8e:98:5c:9e:05:7c:51:68:f5:1c:fa:f2:c1:89:
36:4d:8f:1b:58:1a:95:74:69:6a:a0:8b:93:46:1d:8c:4a:9d:
4f:0f:94:2f:1b:62:a1:40:0a:b3:65:46:33:5c:1e:58:b7:0a:
c3:09:1c:26:21:b5:3e:dd:a5:fe:84:a8:83:cf:df:0d:4c:a1:
e8:86:0c:1c:cd:65:05:64:1b:c1:f8:3d:3d:88:98:a1:2f:50:
82:9c:9f:d3:59:7c:75:63:5a:3e:29:44:d9:ba:fc:7e:66:1d:
a2:07:3e:25:23:74:e6:c7:90:48:19:e2:a1:c8:a3:64:3e:a5:
46:60:7d:11:bf:a8:37:a4:76:3e:e1:ff:37:ee:09:26:5c:1c:
96:fa:34:ae:d5:a7:39:9a:60:d2:28:b4:43:b4:6f:8a:8b:1d:
0f:87:24:10:76:17:ac:6f:2a:c7:69:42:f8:5d:32:4f:05:59:
12:f0:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org